Security Bulletin

Did you ever seen ZPAQ archives? This morning, my honeypot captured a phishing attempt which lured the potential victim to open a "ZPAQ" archive. This is not a common file format. This could be used by the attacker to bypass classic security...

If security teams prioritize less, they can achieve more and remove the bottlenecks to effective project management.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Episode 1 of Bugcrowd’’s docuseries, Unsolved Cyber Mysteries, describes signal hacking attacks in the 1980s and the potential motivations behind them.

The legal actions may have a chilling effect on hiring CISOs, who are already in short supply, but may also expose just how budget-constrained most security executives are.

In one sampling, Adaptive Shield reported that only 1% of 5,000 vulnerable companies are still exposed.

The wider availability of turnkey cyberattack kits in the criminal underground is leading to a glut of campaigns using remote access Trojans (RATs).

The parties within the International Counter Ransomware Initiative intend to use information-sharing tools and AI to achieve their goals of cutting off the financial resources of threat actors.

Investigation by the Denver Gazette revealed that the Colorado Department of Higher Education failed to report a widespread ransomware-related data breach to the state attorney general's office within a month of discovering the incident, which is in...

Dallas County has confirmed having a portion of its network impacted by a cyberattack this month, which has been claimed by the Play ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

Threat actors using private keys and passphrases from LastPass databases stolen in cyberattacks last August and December were reported by ZachXBT and MetaMask developer Taylor Monahan to have been able to exfiltrate $4.4 million worth of...

SiliconAngle reports that phishing attacks have increased by 1,265% between the fourth quarter of 2022 and the third quarter of 2023, while credential phishing attacks have risen by 967% over the same period, with the growth fueled by the increasing...